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RSTS For Beginners 


by The Maruder 

RSTS/E is an acronym for Resour System Time Sharing 
Environment It is an operating system, most commonly found 
running on Digital Equipment corporation's (DEC) PDP sea 
of computers (ie, PDP-11/70 being quite common). This 
Article describes the basics of identifying. obtaining entry, and 
some basic things (o do once vow are in a sytem renning 
RSTS/E. 





System Identification 

Upon connection tou RSTS E sytem. it will ually identify 
itself witha system header similar to 
KRAMER CORP. RSTS/E V2 
UP) FERS. 46 PM 
User: 

So as you can see, an RSTS/E system is quite easily 
recognized due to the fact that it actually telis you in the system 
header. I is possible for the sytem manager ro modiy the opn 
to not display this information, but very few systems do not 
print out a standard sytem header. V it has been changed. 
WiN most likey wili disptay the Vier: prompt Note valo sor 
entirely uncommon for RSTS systems that prompt for a wer. 
Dumber to vie the "W" character. In either case once you have 
reached the uer: (or W") prompt, RSTS/E a now awalting yoo 
to enter a valid user (account) number. Once you entera valid 
PPN, RSTS will prompt you with: “Password” T you enter 
both a vald aceount, and it matching password, you've m. 

‘Login/Account/Priaword Formats 

‘An account on an RSTS system is always two numbers 
between and 255 (inclusively) separated by a comma Tha i 
normally referred to as the Project Programmer Number or 
PPN, The first number isthe Projet Number, and the second ir 
the Programmer Number: Some examples of valid PPNY arc 
200.200; $0.10: 3030; or 1.1 

Passwords on RSTS/E system are always {to 6 characters 
Jong and can include: the upper case letters "A-Z". the numbers 
“07, or a combination of Both. No lower case letters. and no 
special characters are allowed (Le. $5.4. etc.) So you 
con eliminate using these in an attempt to hack & password 

‘Onall RSTS systems there are accounts that musy be present. 
Unless major sltware modifications are made they sf exi. 
Here ix a lat of these accounts and the default passwords that 
are used When Digital instalis a system 
ACCOUNT DEFAULT PSWDSE) COMMENTS 


JOBS KM2 (DIAL 














12 pmo,sysum, 
SYSMODICMAN. SYSTEM nA EY 
is DEMO 


Orai the accounts, itis most difficukto remove"! 2"due to 
Software requirements, so if you are hacking a system from 

ch, it is suggested that you try to work on a password foc 
‘this account, also note that "1 2"is the system library, and the 
default system managers account, so the passwords chosen foe 
it sometimes reflect these facts. Also hacking at this account 
kills wo birds with onestcne not oniy must i be present, but 


zs 





it also has full privileges, as does any account with a projet 
number of 1 Ge. LXXX). Once obtained you will have fall 
acces to anyhing on the system. 

Basic System Functions 

Once in, RSTS/E will prompt you with “Ready” You are 
sow in the RSTS; E "BASIC monitor, and you ouid type ima 
BASIC program, etc, Here are some seful system 
<ommands programs that can be of use, 

HELP- Simply type heip. Itvaviiableon most systemsand 
fully self-documenting and menu driven, I wil give you a 
compete dectiption of most system commands and Junctions, 

DIRECTORY (or "DIR. will give you a listing of 
programs les that reside in any account vou spel. Simply 
"pnt DIR willis che fles in he account you ane în, 1o obtain. 
a directory of another account, simply ver the format: ‘DIR 
XXX XXX): where AX AK s my valid account number, 
You can also substitute an in place of either, fora mih all 
or Wildcard" seach, 

SYSTAT(or SY) wil give you a listing of who ehe ia 
currently on the system. what they are doing or running and 
Some other information. This command s especially wil for 
baeing other valid account numbers (PPNS), 

OLD allows you to lead a basic program (any file with a 
BAS extension) into memory th program it in he same 
account as son, samply type OLD NAME EXT. and if the 
Program resides sn another account, me the format OLD 
(XXX XXX) NAME FXT", where NAME EXT is the name of 
he basie program and XXX XXX i the account PPN that it 
fede in 

PIP—is the Peripheral Interchange Program. It ic» fancy 
name fora basic ile utility used to transfer files from one place 
to another. You can get a ful description of i usen by typing 
“HELP PAP" 

BYE— ogs you off he system. Always we this command tó 
logott! Ifyou simply hangup, your account will remain lopped 
on, ina DETACHED state. and this wil automatically arouse 
he suspicion of even the densest sysop, special if youve 
managed to obtain a privileged account 

Some Fina! Noles 

aceon under any account doa directory ofall che (0,*) and 
(L.*)accounts. You wili notices column in the directory linting 
that is labeled "PROTECTION": This it a program file 
Protection code. It can be set to various levels (Le any account 
‘an ro list, certain accounts can nan ist, ec. Look farany 
programs (files with extensions: HAC. BAS. and TSK) which 
Bave a protection of (232) or (252), These are program that 
ise anyone who rons them privileges at the time they are run, 
Somake a nore ofany programs with extensions ofthis sor at 
"ry runeing/exploring every one. Many programy have Pugs 
that can be used to your advantage, This can be disciaed in 
future articles. There is also a program that will allow Jou to 
chat with other sers onthe system. You can usually ron it by 
ping RUNSTALK- It will ask for a terminal otros and 
you can obtain active user teins by msing the SYSTAT" 
p 

In conclusion, RSTS/E isa fairly user friendly system to 
se abuse, and one of my perscnal favorites, You cm ler the 
basics and become fairl proficient in a relatively shor time 





















































MOBILE PHONES—THEORY AND CONSTRUCTION 


by The Researcher 

This article explains tbe operation and corstrcton of a 
motile phone. The fst scion was writen in elaboration 
With another telephone experimenter, Y concerned Improved 
Mobile Telephone Service (IMTS) signaling and was 
eventually posted on a BIS in the Midwest. From there ite 
into he hande of the Chief of Security of Southwestern Bel 
His words to the Sysop. who had been busted for Boe Boxing 
onere "A person witha knowledge of electrones cauld usc the 
information in that eto bad his m mobile telephone. The 
est of the article capis how one cam be Pl 

T presupposed that you have a working knowledge of 
two-way radio, L vou don possess this knowledpe. hen you 
can study upon narrow band FM and 2 Meter tramite. A 
pood source of information is "The Radio Amate 
Handbook” (readily available from libraries and book sore) 

Signaling Used in IMTS 

ach mobile telephone channel consists of two frequencies 
one for the and be ation and one for the mobile phone The 
buse ation uses two tonet for signaling: Lle- 2000 Hiz and 
ele -800 Ho. The mobiles use tree topes: Guard 2150 Ho. 
Connect 1688 H. md Disconnect - 1236 He 

"The Jand base stáion mark the di channel by placing he 
dle tone on t AD the mobiles search for the channel with the 
2000 Hir Ve tone and Jock oa to K. 

Each mobile phone iasigneda standard telephone number 
umsiting of area code + 7 ipt, Whena land cuwomer diaba 
mobile mmber: the Idle tane (200 H changes to Seire (1800 
H). The number pulsed to the mobi phone contains? dis 
Oomsisting of the area code and Tast 4 digits of he number. The 
dix are made up af 30 me pulses of 200 Hz separated by 30 
rot IO Hi 

there i à mismatch between the digits sent and the wired 
1D in the mobi the mobile drops off and hunt fr the idie 
channel. I the number matches. the mobile wil send back an 
Acknowledgement tonc of 750 ms of Guard (2150 Hz). The base 
ation wats 30 seconds for this tone IE not received in that 
"me, the eating party gets a recording. be tone received. 
the mobile phone wilting for up to 4$ seconde Ringo i 
composed of 1800 Hz and 2000 Hz shifting at 25 ms foc to 
Second then four seconds of 1800 Hy. When the mobile pone 
Is picked up itsendsa connect tone of 1633 He fora20 meta ti 
‘he bose station it has answered. When the mobile hangs up, i 
sends Disconnect, which ia 780 ms of 1336 Hz. Wen the hase 
receives the Disconnect tone, it wil drop carrier far about 0 
mand po off Iit is the only available channel, will return to 
[S 

‘What follows is what happens when a callis originated bya. 
mobil: When the mobile ges off hook, t ends 350 m of. 
Guard (150 Hy) followed by 50 ms ot Connect (1633 Hy). 
When the base station hears the Connect tone, t removes the 
Idle tone and stays quiet for about 2507. I then transmis 250 
"réf Seize (100 M). The mobile then sends 190 ms of Guard 
and tarts transiting the TD sequence at 20 pulses per second 
The ID is the area code and inst four digits of the mobiles 
number, The pales are marked by 25 ms of connect (1633 Ho) 
Followed by 25 ms of her silence or Guard tone (2150 Ho) If 
the pulse is odd, itis followed by silence I even, itis followed 
by Guard tone. Thisis used for parity checking. The interdigt 
time is 190 ms and wil he esther silence or Guard tone 
depesdingonwhethecihe last pulse was odd or even: Ithe bast 
Pulse ofthe last digit in the TD i even toil be followed by 190 
ms of Guard tone 

When a mmber is dialed ftom a mobile phone, 2150 Hz is 
sent continuously as soon as the dia goes ff normal (when tbe 
dialismoved fomite resting postion) Dial pulses repecsening. 





























breaks ate marked by 1633 Hz and are sent at 10 pulses per 
second. A pube is 60 ms of 1633 Ho with 49 m. of 2150 i7 
between pues 

"The ruo popular mobile telephone channels are located in 
the VHF high band. Cities are equipped with these chanch 
amore than ans other hand. They are ed below. 
Motike Telephone Frequencies 





Channel Base Mobile 
n "js dem 
YL 125415780 
L1 IBS gem 
v 1524015786 
n me se 
x» 1246 gsm 
5 I2 ges 
ys IO as* 
YR UNGS o deer 
xK IS% 19804 
m 1281 enm 


Building the Moble Phone 

The ina fi ofthe components you wil need to uk! your 
‘own mobilephone 

Caste Tape Recorder. 

2 Radio Scanner (Like those wed to receive police ith, 
3. Mobile phone dialer (build your own). 
A. Tow Power Transmitter (Medi) 2:Meter transmitter 
Swans). 

How a Mobile Phone Dialer Built 
Build a Wieo-Rridge oscillator to penerate the needed tones. 
These are commonly used i red boxes H You don bave u red 
box schematic, look up Wien-Bridye in an electronics 
textbook. Where you would normally connect a frequency 
!adjstment pot, use teo multum pots connected in series, 
Power for the oscillator wil be supplied by a 9 volt battery 

Obtain a rotary dal of the type used on rotary telephones 
The dial wil ave four wines coming ou of t two white, onc 
blue, and one preen The two white wires make a connection 
when the dial is off normal (moved from i resting position) 
Consect the two white wires inseries wich one ot the leads from 
the volt batery The oscillator vil be running oniy when the 
dial is moved off normal. It works lke this: Dial is moved ff 
normal —circuit is completed between ovilator and battery 
Dial poes hack to resting portion. cui i opened. 

The blue and green wires po o a normally eosed contact în 
thedial. This contact opens onee for cach pue in a diaked digit. 
For example it opens throe timen for the dipit "Y" Connec 
these nwo wires (blue and green) aero one of the pots in the 
Oscillator. With the dial in its resting position, adjust the acher 
pot for a frequency of 2180 Hz (Guard tone). Mave lh dia 
"otl the contact opens and adjust the pot with the blue and 
green wines going to fora frequency of 1633 Hr (Connect 
tone) 

‘When the dis moved off narmal. power will be applied to 
‘he osillatr. and it wil opi running at 2150 H7. When the 
dial ircleased the short across the second por vil be removed 
‘ich time the contacts open fora dial pube During these nube 
times the frequency wil shift down to 1633 Hz. When the fal. 
515 back tò its rert position, power willbe vemowad from the 
‘xclator. This will exactly duplicar the dal pulsing ef a 
ose telephone. 




















The Tramenitr. 
Antennae wed by mobil phone hase stations are located on 
high towers. Thisallows line-of-sight transmision to and from. 
the mobika. If you are within a few miles ofa base station ven 
Continued on page 38) 
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British Phonebooth Wedding 

They met ina telephone booth, be proposed to her in t aad 
the phoneeomany fered them The a fashioned red hoasa. 
welding presen. 

"hoc two Britons met by chance at the payphone in 
heat England city of Middlehrosgh. The perspective 
iroom said, "She was taking so long 1 had to knock on the 
Window ta hurry her up.” The argument produced 
md when he was finaly ready to propose mart 
ielphoned her frm the same booth 

The couple plan ro marry tis year and want to pur the booth 
in their ganden as a memento. 

A British Telecom spokeswoman said, “We would Ye very 
happy to pive them the kis as a wedding present,” The od 
wooden and metal booths, which are being replaced across 
Bata hy modem facilities are normally ad for $300 cach. 


Man Worries About Sprint Bill 
yeso iem Gesn pnced ven e niche 

aon bil foerat e calo end Ho 
MO tough phone cpu tues ne are id 
Maud and Rare wud te ek repos 

doni eontra Pepe Termes 
sscantetora tech treated Nobo cod tome 1 
Volens han ty bed tede bet vem 

The Mi am GUE Sprint wer ci pgs long ard ded 
tale fom New Yo. omar las and mene oer 
fcm Onan ne bilsbowed bat secon p 
chem an cimiases itg tamea E ol 
SS 


Bad Tenant Databases 

Companies hired hy andlode to investigare the Sane 
rent hitori, und backgrounds of prospettive tenants have 
Prepon operating i the New York area 

"Tenant groups contend that sch imvestipations, similar to 
inquiries by crdiccaing agencies on people seeking redit 
lenve enters lese to abuses 

"The companies which identify tenants with seh problems. 
m bounced checks. past evitos. or eredi shore 
{hey protect anon from tenants who kane t 
Paying their rents or of causing suancer that have led 10 
rion procedinge 

The companies are intensifying their efforts just asthe publie 
sonis ofthe city Housing Court are becoming readily 
tvaluble fom the courts new computer system. The quick 
ices tothe data could alo help tenants seeing to detemine 
the record o a potenia lanon 

“you dont ge heat or bor water, you have the right 
wild your rent." Mr. Scherer. a Lawyer and honing 
nordintar for Community Acton oc Legal Series, sad 
“These computer systems will tend to make progie very 
eis about crecsing fundamental right guaranteed 1 
them ty E des 

Companies ask therlandlondeientto provide the mamas 
tenants who have Been cad. “Were tying to dewelop a 
database on people who have actually been evicted, ad we 
hope to have the nares of 500000 wc individual ina yar or 












































spokesman for one such company sad 
"Representative Charles E, Schumer has introduced a bin. 
Congress to protect tenants against abusive inquiries, No 
Federal law now shields tenants from the misuse of 

mation. This bili would provide protections similar to the 

(rol! Fair Credit Reporting act, which requires credit 
img comparics ta tel consumers why credit applications 
Ste cejctd and abo pres connumers a chance to challenge he 
Accuracy of any data icd agains them. 

One of the nationwide credit reporting, companies, now 
marketing advisories to New York area landlord i TRW Ine. 
Other companies include Data General and Telechek Services 
[^ 


Car Breathalizers 





















“Thank to technology and new legislation being introduced. 
in Colorado. t may not be long before those who have had one 
iao many won beable so svar ktalone drive, thelr eart A I 
WiN be introduced that makes mandatory for repent offenders 

atalia Guardian Teterlock Sytem in thei car or lane their 
em The device. which retails for $295, utes the ame 
technology at the police "Wenthalyer." The problem drinker 
breathes into a mouthpiose Chat analyzes the sample with à 
microprocessor, the alcohol cout exceeds I, th car wont 


Phone Phreak Fined 












X ljearold New Jersey man has been fined 5300 and 
ordered to pay back $890 in Tonpdistan ralis he made at the 
expense of ATAT 

Robert Davenport of Chippewa Tail was abo sentenced to 
‘one vear probation and directed to get a part-time jb within 
te month 

"My interest is still in telephones and my interest bs stilt in 
computen. but ss far as hacking and phreaking go- nat 
amyriore. Davenport said "Bel poing to be monitoring me 
pr 

He had been charged with criminal attempt 10 commit 
computer-related helt. computer related theft, and theft of 
Serves He pleaded pully tothe ter chare, so the other two 
‘sould be dropped. 

“This case where your technical knowledge exceed 
yourmaturiy Ihe judge sid. "Unt you start ating Youre, 
you're ley to get younse in trouble ain” 

Davenport said he did ot comet the erime for any financia! 
goi. but only ta continue my existence or my knwiedge asa. 
Phone phreak.” 


Marcos Phones For Free 

he State Department said it had placed no limi on 
telephone calls made by former Dictator Ferdinand Marcos 
white he was a got ofthe United Sates in Hawaii, 

‘A Stat Department spokesman said he could not confirm 
reports that Marcos has made thousands of dollars worth of 
telephone calis Trom Hickam Air Force Base in Honolil or 
that Marcos was trying toinflvence polities m his homeland by 
telephone 

TMareos is now living in a private residence in Hawaii and 
presumably paying for his phone calis] 
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Dear 2600 


An sue last fll (September, 198) described the Nue box 
coding for the verification trunks and gave an example for 
Michigan (86) 
Thecodes went from00 t099. Do you have the ones forarea 
codes 415 and 408? 
Telco ANTS for the San Francisco area are 7 
doesnt work, try "76002223." Right # gis, not 7 
A Reader 





IE hat 


‘Dear Reader: 

We hope sha) someone provides us with a list of orca 
lemfiers that correspond to dilferem arca codes. Bu 
‘then, there ae onl em to choose from: "0011 up t0 
99" So irr them out 
‘Dear 2600 

AS vou can ee from the enclose, 1 wrote toan associate 
Hong Kong (after purehasiog ail your back issues and 
subscribing) fer reading "1984 arrives im Hong Kong” (Flash, 
Tana, 1988) Thope Bis reply i of he 

Ren Harroll, San Diego, California 





Dear Renders: 

The arici Mr. Harroll refered to mentioned snacking 
devices tho w oui be instal on alt cars in Hong Kong, o that 
"e govertment ouid charge for ead uage. The folioan i 
{rom rhe reply mentioned above 

IERP Electroni Road Pricing, which i one of the HK 
Hore Kong, government y let than oid ideas aid to be 
konting nthe vcnit of HKDLRS 386 milio, requires ihe 
‘nolan of on entre underground elersron reticulation. 
"eee anions poxitonea vlc pois trout 
e Fo to be "nid 

“These point ed specifically designed mimber plates 
dtd to rhe vehicles passing along the roads ond the fact 
veo for laver billing, 

Thi i rotat untested scheme. never ben used anywhere 
‘ue and is heme furonalr oppose by practically everyone 
here. There it in jaer, every lloc that having spenr about 
{8 million in o pilot snu she HK goveenmen wil have 10 
uet dele she whole thing 
Dow 2400 

noticed ume error jn your “final words on VMS” (March 
1986). The proper command for changing the default device 
prior to a dveetory search is SET DEFAULT devicerame: 
instead of SET DEVICE devicename: as stated im the article 
The SET DEVICE command requies OPER privilege and 
duen? do what you want anyway. fmightal bea good idea 
ta quutily the SHOW DEVICE command (SHOW 
DEVICE MOUNTED) so that you don't lave to view all 
terminals. tape drives, ete 


MOBILE PHONES 


MConimued from pore 328) 
lil powers needed w establish contat, | to S wattsshould be 
‘completely adequate. The les power you wie, the les your 
chances ol getting caught. More on this later. 

-Meter transmitters, used in armateur radio, operate in the 
range af 144 to 188 MZ. With change of ryt and a ite 
refüníng, you have your transmiter 

How A Home Brew Mobile Telephone i Used 

With à scanner, locate the base station frequency which 
Currently has the Idle tone on t Switch to the mabe frequency 
‘on that same channel ad monitor it wit the caste recorder 
Tunning continuously. What you want isa can recording ofa 























letters... more mail from you... 


Dear 260: 
“The following is true for Unix systems versions 30a lower 
Unix isset up so that anyone can view anyone else’ files 

unless the mser has changed the permissions which rarely 

"appens- This i especially true for the password fie, Don get 

fed now. this does not mean sov can sc the passwords at 
least not for now. Almost always the password fie is under the 
ae subdirectory which is under the root directory. The 

Command-path sate pastud". 

‘This is excellent for looking for accounts without passwort 
and finding out wer names, The sername i followed by a 
‘colon then comes the encrypted password, lf you we a 
"ername with two colons following t that means the account 
does not need password. ATI you have todo 10 get into these 
accounts ix type the username. No pasword hacking! Be 
forewarned that these accounts usually have a very low acces 
JevelbotTimsoresoucan work your wa around it C programa 
art very god to get around thi minor obstacle, 

‘A noe on encrypted passworde Thy are encrypted uing 
modified verson of the DES encryption algorythm. 1 have. 
eat that ti posible toute the" Cypr command to decrypt 
the password i you know the key which | heard ia rater. 
Sample defauh. ave yet to see this work, but we al) know 
Anything possible m this world. Another helpful bin is the 
esed command whichallows you to chana n password. Just 
Spe the command and the computer wil become trendy and 
ose you through the prosess. 














Heyzeus Argus 
Dear 260: 

The day 1 recived my March ue, 1 stared phreaking 
around with American Express and Hound that the touch 1 

ration system is not dead, just a bit different, Ir found 

St 804924102. 800522517). and BOOSZRGORG, (Numbers to 
Socialenpincer are 8003271005 and 8005280642- act le a 
dim merchant) Voice verification i 005282121, Afer the 

itin carere tone. enter SH. merchant 2 (10 digits). AX 
cand £. and amount. using pound ey C'H") to signal end of 
inpot and instead ofa decimal point nthe amount of SS se * 
A beep is beard alter each input The lady I spoke to said you 
can} acces an operator on-line. 














NYNEX Phrenic 
Dear NYNEX: 

Thanks for the information aout ox: this tov works 
didnot say that this service ws dead in last month vail (An. 
“American Express Phone Story). The author, Chester Holmes, 

referring 10 the ability to pet on ouatpoing dial one from 
American Express by using ther intemal phone sseni H 
ha technique which no longer works 








mobile unit brondeastng its |D sequence. You also want a 
cording af the disconnect tone when he hans up. Once ou 
ave these, rewind The tape to the start ofthe sequence. Now 
you ame ready to make à cal 
The Procedure For Pacing » Call 

|. Set yone scanner to the hase station frequency with the le 
tone and leave it there: Monitor with earphones toavoid audio 
{endeack through the tranamiter 

2 Set the transmitter to the corresponding mobile frequency. 
Turm on ond cave ton 

(Contd on page $29) 
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A Story of Eavesdropping 


verybod knows om old man wha was im the Second World 
War, and has plent of wor stories to tel. Well sometimes 
pns 1o take the tie fo Ite. 

"We knew that the enemy was monitoring all of our 
international radio-telephone channels, despite the 
sophisticated vaice-scramblers which inverted” speech 
making high tones into low ones and vice-versa, Only 
athoried persons wore permitted to use overseas telephone 

‘We were equipped with elaborate recorders and switching 
control boxes which permitted us to col off either side of a 
‘conversation, oo substitute ourselves for either party. A strict 
set af ules forbade us to permit maritime information, weather 
reports, cargo information, e. to pass over Ihe crits 

Tafloenees in Washington sometimes resulted in orders 
issued to ux to permit use of the overseas telephone circuit. 
ven though we were suspicious of previous conversations 
because parables and unusual phrases often used, made it 
dfi t follow what was being said. “How can we monitor 
‘carefully, when we can understand what they Ye saying?” went 
‘heeded. 

We caught one fellow red-handed in South America ming 
weird terms like "birds leaving the nest with a basket of eggs. 
finally eut in the circuit and told him I forgotten what they 

samt, He tried u couple of other phrases which T also couldn 
‘understand. Finally he lost his potence and buted out. “OR 
hel mn talking about those special munition orders which f 
Yesterday or Germany.” 

"By this time, a special telephone speech scrambler had been 
develope which was small enough to fit and ave ona desk In. 
availability was extremely limited, hot a couple of Army 
oficen-—one inthe US. and the other in Paro had been 
Able 10 pet hold of a pac of them, and between them secretly 
installed em on their desks unbeknownst to us ol course! 

‘One day I heard he fellow in Panama aj "OK Joe, nom over 
to the serambler" and thee ensuing convenation became 
"iniri. We quickly checked the radio telephone icut 
equipment and discovered that he technical characteris of 
Ihe equipment they were using and our own was identical Asa. 
resol, when they inserted thee seromblers the speech inversion 
righted elf and their conversations went out ove the radio- 
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telephone ewcuitinclearlanguape-readableby anyone"! That 
{he end of the use of their private "secret conversation 

‘Some of the wont offenders of aversas telephone we 
security were the top people. l1 have to list General 
Ersenbowerand Marshallastwoof them atlastiemetimes 1 
san remember one day the circuit between London and 
Washington happened to be very poor in quality and 
"undentandsbity" was stretched 10 the utmost 

Genel Marshal in Washington had General Eisenhower 
‘onthe fine in London who couldnt understanda wort of what 
Marshall was saying Marshall repeated several time “Ike, this 
is GCM—MarshallGCM-—got ic" without resus. Finally 
in frustration Marshall tumed to an ade and could be pin) 
heard o say "Whats the code word for my rame?" 

The next thing we knew, Marshall was slow and distinctly 
fepeating his code name interspersed with "GCM" and 
“Marshal” Ofcourse we had to cot the circuit and notify the 
‘xd group in Washington to immediately “bust” the code- we 
‘couldn’ take amy chances- revelation of the code word tor his 
name might have been ali the enemy intelligence wax waiting for 
To heip it "code-break” other communications, 

‘On the other hand, residen Roosevelt and Prime Minister 
Churchili were two of ihe bestand easiest to monitor Both used 
references to previously transmitted overheard menger by 
Bombers and most of the conversations were along The inr 
“Well Winnie. on number S2, really dom? think we saul do 
‘that—yoo know how they are.” Nobody conid pun any 
formation from listening to their telephone conversations, 

{always enjoyed listening to Sir Winston originating a eall 
The British telephone operators were required on every 
concectiontoannounceinadvanceof a conversation: "Youare 
warned not to mention the names of vesels, sailing datet or 
Conditions. cargoes, weather, ete., ete- ctc. amy volion on 
our part wil eso in the circuit being cut of and your action 
eng reported to the highest authors. Do you undentand?" 
Sic Winston atways docil replied, "Yes ma'am, understand” 

‘Onc enemy group had learned the "languape" of speech 
inversion. For example. istening on the uirtoa radiotelephone 
‘ceca. one might hear a word that sounded exactly Tike 
Lrinkomope”. that was the wond "ierphone* afer had 
passed through the speech inversion sytem!" 


MOBILE PHONES 


{Continued from page 3-28) 

3, Pay the taped ID sequence 

4. Use your dial pulser to cl] the desired number, If alus. 
pone wel you wil har your ial pulses in the earphones, You 
‘aa we this method to call one of the special D numbers and 
‘whistle off with 2600 Hz: then MF to anywhere in the word 
This technique wil reduce your visibility on the bill for the TD 
Yom are umng 

5. When yov are ready to hang up, play the disconnect tone 
and switch ofthe tranemite. 

A Few Notes About Your Own Security 

‘You should use only as much transmitter power as necessary 
to maintain a reliable contact, I you do mnch of this kind of 
Experimenting, the FOC is going ta be after you with direction 
finding equipment, These use directional antennae and a 
proces of triangulation o locate ilegal transmitters. 1f you 
Aecp your power dawn, stay mobile, and avoid establishing a 
patter of calling at he same time every day, i will be nearly 
Impossible to track you down. 
This file wos kindly presented by P-8O Systems for 
emeriziment and academie stay only, It & à violation of 
Federal laws to operate an unlicensed transite. 
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This month at 2600 





allow ox to conclude our study of this favinating. 
ase. The information takes the form of tvo traicris of 
proceedings to obtain search warrants. The first tani 
Soncerms a euch warrant for a computer that was eyed in 
New Jersey just before the Private Sector was ird an July 12. 
1985, I was "evidence" fraen this first warrant tht permed 
the second, more welt known, raid of seven computert The 
second iranscrpt i the proceedings that permitted the seizure 
of The Private Sector and the others 

We don have the room to print these document here, but 
wean print afew excerpts, Roth transcripts have been Kindiy 
Yeyed by some mad typists ino computer readable form They 
nre now availible on he 2400 office BRS (5167512600. Friday 
and Saturday sighs only from 12 midnight ntl 12 noon ony) 
And, of courne, on The Private Sector (2013464431). Hardcopy 
printouts or an MS-DOS disk containing these trameripts are 
viable from 2600 for SS We hope you ed thes transept 
cand sprend tem around the country. They mention he muat 
redit ard fraud tl fra, theft of service. computer (rau 
and countless permutations n them thes mention of he. 
‘control of satelites, the ordering of tank pars. or the spread 
secret Pentagon phone numbers. N took Middlees County 
Prosecutor Alan Rockoff the whole weekend after the 
Computers were taken to come up with these fairy ales Taking 
the form of typenl judieialype questions and answers the 
documents give insight into ow w enforcement offica 
think (or don’ think). They reflect the clic example of an 
unexperienced government (unexperienced with dealing with 
computer related issues) stumbling over people eights Here 
are tome of the pood pts 
Wi did Ier pick on these seven people? 
A We narrowed the ist dawn ta the seven [out of 10 possible. 
“suspects who we fec are the main offenders long with Mr 
XXXXOOE and his bulletin board servise My vtüing is 
records, reading his messages from thse people that they have 
ost on his bulletin board and also by calling these bulletin 
‘boards up utilizing Patrolman Grennier's computer and 
obraining information from their computer. 
nd mov here ts he "evidence which alowed then o break 
"nto the homes of even New Jeres computer hob 
Q: And this mimber [referring to another victim of thi farce] 
also iza- isit a bulletin board? 
A.N tight, We did not aet through to this number however, 
hy the way is busy it appears to bea bulletin board. Once we 
dnd pet through we gota carrier but my computer was notet up 
To receive it à there ix a computer on lipe there and by the way 
itsbusy 1t% chameteristie ot a bulletin board system 
How thas for concer evidence? 
Q. What information did you receive from M. XXXXXXX'S 
programa that would indicat that the computer at 757-NXXX. 
teas being used for ilic purposes? 
A. He was giving information on how vou could tei you 
‘were imo the phone company they were tracing you so hat i£ 
You were calling ilepally yoy would know fora fact that youare 
bring traced. Me also gave directions om a diverter and bow i 
works with complete information. 
Q. What information did you obtain froen this particular 
umber [yet another number? 
A. He pave something known as 300 codes along with anh 
ako gave a number for conference cling 1befeve thats what 
thal 
Q: What information did you receive from $49-XXXX? 
A. NI right. Through him we received a conference call 





























samber. He also gave you information on how AT&T traces 
numbers. He telis you ike, for example. there was one number 
given out on the bulletin board for conference call which i. 
‘350-1088 and he explains to you how that is traceable. You. 
Should not use that number because a ot of people are pettine 
caught. Real states that if you call him he wil pve youa ISt 
Sprint acce numbers and he gives a phone number toca 
Sprint access numbers are passed around quii gladly by 
Sprit. Conference ail numbers are alvo pub Anovdedye 
Information om racing is o ilegal either. 
Q. What information did you get ol of Mr. XXXXXXX'S 
"bulletin board that would indicate that Red Barchetta is using 
"bis computer for illegal purposes? 
A-Heexpainsto you ow to make mace, CO2 canister bomb, 
‘urstable explosives, a jug bomb, a smoke bora, something 
known as a rocket engine bomb and he fet info how to wc 
hosschoid tems to make those and the correct mixtures for. 
making ame. 
Even these people couldn't deny thar he 1t Amendment lows 
for skin af thing. So here’ how they got around that lle 
indian 
THE COURT: Well, what wang with telling the whole wold 
on how to make bombs in their kechen? 
PATROLMAN GRENNIER: Well, number one, i the 
possibly that someone who was ot ready aceewibie to that 
‘formaton now has i much rer and that type o person may 
Be mone kely rose t In other words, right there wow, I 
mot something that they have to research, 
“And for those BBS operators out Here ho somehow think 
clemens serve as odvantage w all. 
Q- Okay. What other questions did they ask you for the acces? 
A 1 Twas a rw enforcement office, i this was part of an 
Entrapment. and the this question i this was a rap. 
Q. And you had to respond to those question? 
A That is corroe, 
Q You responded in the negative? 
A That it correct 














Since The Private Sector ws retur, it arrived with 
something interesting. There was a new. updated userloj 
‘whic ed the lopom that were attempted while the computer 
Sasin the hands of Middlesex County. The order of the lapons 
Subsequent to the seizure of the equipment were 
Q0000QQQ. 2400 MAGAZINE, MIDDLESEX COUNTY 
PRO. 2600 MAGAZINE (3 times), KID & CO.. 2600. 
MAGAZINE (2 times), BROADWAY HACKER. LEX 
LUTHOR. LOGIC GOD. PRIVATE SECTOR, JOHN DOE 
(4 times), GRIM REAPER, JOHN DOE (3 times) 
HEADRUSH. FOREST RANGER, FLYING DRAGON, 
JOHN DOF. COL. HOGAN. JOHN DOE (3 times) 
PRIVATE SECTOR. EVIL RABBIT, SHADOW 2600, 
DOCTOR DEMENTO. DOCTOR WHO, DOCTORK. 
JOSHUA. ERIK BLOODAXE KERRANG KHAN, KIDS. 
CO. DAVID LIGHTMAN. JOHN DOE (6 more tines. You 
‘can derive what you want [rom this. The usero sows that the 
First few users in this list "wed" the stem for hal-hour 
periods. opto almost two hours for one of the JOHN DOE. 
logos After GRIM REAPER they used the system between I 
and 1S minutes for cach logon. The logans are datesarpd 
from: 12KS 108 13/85, bot we are ol tha the intemal clock 
may have serewed up the dates when the computer was 
faken. Other office notes we are sill invetgating that 
“magazine” called Computel. We already have much 
formation om them but in another month we shook have 
(Continued on page 332) 
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Bye TEMA TIERLL 


617 Will Be Divided 

"TR BI ae code 7 (Boston wil te pitt provide more 
phone numbers. The western par of the area code wil tema 
eame while the est wil have a pew, os yet Undetermined 
ares code 


Congress Chooses AT&T 





Chesapeake d Potomac Telephone Co., the local 
Washington area Rell affikate that has bad the congressional 
phone contract for the past 107 years. ie Nelerly comenting a 
House Administration Committee decision to reach out and 
Touch ATAT for ts future phone needs, 

Representative Charles Rose sud that ATKTY offer wax 
simply better partestarly hecause all the phone-rwitching 
equipment wouid be located on Capitol Hil grounds CAP 
‘would have stehe in other par of the ety 

“All onmveratons will ems on Capital Hill" aid Rose, 
‘ring vecurny threats of eetroniceavewiropping 


Baby Bells Don't Pay AT&T Bills 

"AT&T has fied for the recovery from is forme Bell 
‘offspring of more than 387 milion for fure o propery b 

d collect revenues de it from end-ines following the switch 
oan aceeseeharge billing system after divestiture, 

ATAT sad the ion S share ofthe burden about $40 million, 
ix duc from New York Te. An ATAT spokesman said the 
Amountsare now bein formally claimed because of a two-year 
Nate of limitations om such cim 

‘Other claims range from S? rion against New England 
Telephone down to $330.00 fom Nevada Bel. 

"Since divestiture, the local Bel Operating Comp 
handed bili for most long distance and some 
services, AT&T said Ihe claims are lega procedure. adding. 
that “whenever another company handle biting of 1 
magnitude, you're bound to run into problem. 

Inthe complaint, ATT said hat in the case of New England 
‘Telephone, it had been “deprived of revenues" by “various acts 
and omissions,” Including the failure of New England 
Telephone to “property record, assemble. edit. or process 
details of switched services calls placed by ATAT 
Communications” end users" 

Other charges were that the telco aie in some instances to 
properly prepare and proces bills for mesage-illed and bulk 
billed services, and some private services. 


Equal Access 800 Drawbacks 
Over the next six months, the Bell operating companies and 
sen dependet honc commana el pend lisa 
Sls o tate an WO ype ema ie D ATATA one, 
pones 

idet incon, he typeof servi they abeto 
Urine iste sister ei 
RAR 

Ta fac, ramecf ATAT arem ey caet 
Mirror miri rd 
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Y SPEAKING 


"areoisinend thcir customers wil buy i 

Ender terms of the divestirare. the ROC's see required tn 
provide all iong distance companies with accew equal to 
ATATS and that includes acces to B00 service, one of the 
‘tation’ fastest growing long distance products, Bt the BOC% 
Wont have the Technical capability to offer service equal to 
ATAT nti 198K 

E00 numbers were functioning so well before the divestiture 
Messe ATAT ued common channcling inti 
(CIS), which looks athe AOD nurnber dialed and amit E 
imna an entirely different number the number of he cold 
ary. Now the BOC have to develop ther own seth of 
Topicatiw CCIS. 


Encryption Provides Signature 

"A des encryption sen pie to ltr eri 
ET mire eile 
[rece pee ere Pen 

Malaisie erea ie an lyon 
inva pec and prae Vy nd ron Ones e 
rende (ai To RSA Di Sear Vie en i 
HU EET 
Cnc harpa tener eodem Too ratia tbt 
Consent dy viad tomeny atie tas ean tedio 
e e MM En 
aasal as akne ar anpa ee atin 

E hi a reniy deme ingen pg a daia Eene 
es sod Tus qucm alt pro de eae es 
me pat lui A ade eme MEM 
Sct a mei tci eters Scns soy ye 
trating Je y o e mein, can Sto he 
Solent mene T pue ila connie, 
rortommemi tatis sea ance 
sumen tht wa peony Unies to pe aman arte 
Stehen et 

Mutat esc n fh patented RSA Public Key 
Ciypresyuem The algoritam was developed at Uit 
Scenes Tee o ehm i IN. 


Directory Assistance Failure 
Re Mi leòr dindi inas 
ites petri e eld nat get aa as an bank o 
arcent i tea ef compe fine 
Aa Fu tbe ees we el (oo out 
manila fioe Votan ol or eerte oan 
actui dec manere nen she 


Dial “00” For Operator 


Very soon, customers of Pacitie Bell wil have to dial “00"t0 
seach he standard ATAT operator. M they dal "V" they will 
reach new Pacific Bell operators. 

The change is part of the divestiture. Tt weas decided that the 
‘ell Operating Companies would provide their own operators, 
primarily for assisting callers in making inta-LATA ca 

"This part of the breakup will require ATAT to pive up ir 
peu 










































PLEASE BE PATIENT! 


If you ordered back issues and you haven't 
yet received them, they are probably still 
being processed. We have been deluged 
with orders over the last few months and 
we've had to reorder just about every issue. 
Please allow four to six weeks for delivery. 
If wo can get them out faster, we will. 


Call (516) 751-2600 
if you have questions. 


EQUIPMENT 
Security, Privacy, Police 
Surveilance, Countermeasures, Telephone 


BOOKS 
Plans, Secret Reports, Forbidden Knowledge 


END JUD FOR LARGE CATATOG AND ONE YEAR uate 
SHERWOOD COMMUNICATIONS 
Philmont Commons 
2789 Philmont Avenue Suite #IOKT 
Huntingdon Valley, PA 19006 
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INTERVIEWS... 
GAME CHEATS." "g 
AND MUCH MüRE 1% 


Published 12 Times n 







UNDERGROUND: 
MAGAZINE 


THIS MONTH 
FCortined from page 3-30) 


‘Eome to siar peting some refunds a well as find out wn 
‘commanding them. For now, we can ttl you at 





‘exe people are defintely ie sume ons behing the magazine 





Sur meeting timc and place in his month's tenu. But ue Ve hod 
3 Surprising ack of ang 
meeting in New York and other cities, But we ned to know if 
Teople are imerested enough w attend. We aio need help 
eting a room for such an event- nothing special; a meeting 
Toom at amy college would do just fine. Call ve wed le for 
Sow to be a part of ihe many changes we have 
Regarding the problems we mentioned last month 
perve we recently received a full refund, Leal 
eared thes ston, 



































